774 matches found
Lsass-Shtinkering
Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...
CVE-2020-0753-and-CVE-2020-0754
Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned...
CVE-2026-20817
CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Description This repository contains a Proof-of-Concept PoC for CVE-2026-20817 , a local privilege escalation vulnerability in the Windows Error Reporting WER service. The vulnerability allows an authenticated low-privileged...
CVE-2023-36874
CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...
DirCreate2System
DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting Short Description: I've discovered comctl32.dll which is missing in system dir which doesn't really exist has been loaded by wermgr.exe via windows error reporting by runnin...
CVE-2023-36874
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-36874...
CVE-2026-97798-exploit
CVE-2026-97798 — Windows Error Reporting argument injection to SYSTEM !WARNING This repository is for authorized vulnerability research and controlled lab validation. The proof of concept fails closed when it cannot identify exactly one compatible faultrep.dll!SpawnDataCollector implementation...
CVE-2023-36874_BOF
CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...
CVE-2020-0753-and-CVE-2020-0754
Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned wi...
CVE-2026-97798
🔐 CVE-2026-97798 - Windows Error Reporting Service — Elevation of Privilege Vulnerability 📌 Overview CVE-2026-97798 is a Windows Error Reporting WER Service vulnerability involving improper neutralization of argument delimiters in a command, commonly known as Argument Injection. The vulnerability...
CVE-2023-36874
CVE-2023-36874 Proof of Concept PoC An educational and defensive research implementation of the CVE-2023-36874 vulnerability, demonstrating a Local Privilege Escalation LPE flaw within the Windows Error Reporting WER component. ⚠️ Disclaimer This repository and the provided source code are intende...
CVE-2026-97798_LPE_Windows
CVE-2026-97798 — WER Time Travel Debugging argument injection to SYSTEM Authorized laboratory use only. This repository is for vulnerability research, exploit validation and detection engineering inside disposable Windows virtual machines that you own or are explicitly authorized to test. See...
CVE-2019-1315
Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...
CVE-2026-96153
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-95947
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
CVE-2026-94525
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
CVE-2026-85862
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-105540
Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-105540
A vulnerability in Windows Error Reporting (CWE-669) allows an authorized attacker to elevate privileges locally due to an incorrect resource transfer between spheres . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . While the provided documents confirm the existence of the vulnerabil...
